Virus detected after scan

Hi, i virus-scanned my machine on throughout mode with arhcive scan enabled.
Nothing was found, expept it listed a list of what couldn’t be scanned…

Then i runned adaware- SE scan and durin that avast detected a virus, which i moved to chest.
Why didn’t avast detect this when i ran the virus-scan?

  • What OS are you using?
  • What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
  • What was the virus name, what was the filename, where was it found
    example (C:\windows\system32\infected-filename.xxx)?

windows xp, virus was found it system volume information or something…
Avast 4.6
uhm…0517-0 ???

System volume information folder is used for system restore. I believe Avast doesnt scan this folder.

A virus in the system volume information folder cannot be cleaned, quarantined, moved or deleted.

In order to get rid of the virus you need disable system restore. This will delete everything in the folder.

If ad-aware scanned the system volume information folder then avast’s real time scanner (standard shield) would scan the files being accessed, this triggering the virus alert.

ahh, i think thats what happened…i choosed moved to chest
So, does this means i have a virus on my computer?

it says win32 trojan-ge…

yep,u have it in your system restore and need to disable system restore to get rid of it cant delete or move to chest as dukenukem said,disable restore and then enable it,u should be good 2 go after that.u will lose all of your restore points.bri

disable restore and then it’s gone? should i scan with avast after disabling it :stuck_out_tongue:
And the enable it again…

I have no idea what happens when i disable restore, hope i not lose my files
Thanks :slight_smile:

once you disable system restore all your restore points are erased,so if the virus is in system restore it will be gone.u dont lose system files just backups that your system makes.after turning it back on run another scan wont hurt,bri

I disabled it, runned avast scan-nothing found…runned adaware, nothing found and no virus alerts from avast as in the first post.

And now i enabled restore point again.
Does this means the computer is virus free?

For the record:
I use zonealarm firewall, spyboot, adaware, microsoft antispyware and of course avast antivirus :wink:

Yes :slight_smile: :wink:

http://www.ravens-craft.com/gnrnation2/style_emoticons/default/party.gif

As a thank 4 all the help that you do here-
-i will link you to a program that cleans your monitor from inside so you will view whats on the screen better :wink:

click here

Tanya, remember this: When you are scanning to find a virus or spyware, always disable system restore. 8)